Evidence record / claude-code
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-24-claude-code-mcp-rule-names-and-anthropic-proxy-redirects-become-stricter
MCP rule names and Anthropic proxy redirects become stricter. 299 repairs deny/ask matching for normalized MCP names containing double underscores. Bare mcp__a allow rules and corresponding agent tool lists reach only the intended normalized server, rather than similarly prefixed names. Requests no longer follow redirects at claude.ai connector, Anthropic-hosted MCP and session MCP proxy boundaries; redirects from a connector’s own server remain unaffected.
Channel: tagged-release. Half: both. Date: 2026-10-14.
Operator consequence: Use the complete normalized server name in permission rules and inspect connector redirects before rollout. A policy or adapter that depended on prefix matching or proxy redirects can lose previously reachable tools; do not widen rules merely to restore that reach.
Receipt
Finding metadata
Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0
Finding ID: 2026-10-24-claude-code-mcp-rule-names-and-anthropic-proxy-redirects-become-stricter
Profile citations
- Claude Code / claim / mcp-name-and-redirect-rules
Source links
Primary links, including exact changelog lines when available.
Versioned source: run artifact